FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Security Lead
PeopleFinders. Own day-to-day security for PeopleFinders’ applications, infrastructure, and internal systems.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in information security, focusing on incident response, cloud security, application security, and vulnerability management. Proficient in securing AWS environments, web applications, and APIs while ensuring compliance with SOC 2 and PCI DSS standards.
Highest-signal resume keywords
Incident Response ManagementAWS SecurityApplication SecurityVulnerability ManagementCompliance Support
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Incident ResponseCloud SecurityApplication SecurityNetwork SecurityVulnerability ManagementLog AnalysisScriptingAPI SecurityOWASP RisksData Protection
Soft Skills
Excellent Written CommunicationPrioritization by Business Impact
Tools & Technologies
AWSFirewallsVPNEDRAVWAFDDoS ProtectionCDN SecurityIAMMFA
Certifications & Qualifications
SOC 2PCI DSS
Industry Keywords
Security PoliciesIncident Response ProceduresEvidence PreservationSecurity AwarenessAutomationAI-Assisted Tooling
Tech Stack
Tools & technologiesAWSCloudFirewallsJavaScriptMongoDBPythonSnowflakeSQL
About the role
Key responsibilities & impact- Own day-to-day security for PeopleFinders’ applications, infrastructure, and internal systems.
- Lead end-to-end investigations of security alerts and incidents, including scoping, evidence preservation, containment, root-cause analysis, corrective actions, and reporting.
- Coordinate with the managed detection and response provider, triage escalations, and track findings to closure.
- Maintain incident response procedures, runbooks, and evidence-handling practices.
- Assess newly disclosed vulnerabilities and supply-chain events across applications, containers, cloud, network devices, and endpoints.
- Run vulnerability and external scanning programs, coordinate penetration tests, and track remediation.
- Protect web applications and APIs through architecture, authentication-flow, and code-change reviews.
- Lead bot mitigation, scraping prevention, fraud-signal analysis, rate limiting, and traffic analysis.
- Assess and monitor third-party JavaScript, advertising, and tag-management content.
- Partner with developers on secure coding, OWASP risks, remediation, and CI/CD security checks.
- Secure AWS environments and containerized workloads.
- Help secure Snowflake, SQL Server, MongoDB, and data pipelines through access control and sensitive-data protection.
- Manage firewall, VPN, remote-access, endpoint, device, identity, and access security.
- Maintain security policies and exception processes.
- Support SOC 2, PCI DSS, privacy obligations, vendor security reviews, audits, and security-tool selection.
- Translate security risks into plain-language options for executives and engineering leaders.
- Document decisions and changes, promote security awareness, and build safe automation and AI-assisted tooling.
Requirements
What you’ll need- 5+ years in information security, with hands-on experience across at least three of: incident response, cloud security, application security, network security, vulnerability management.
- Experience leading security incidents from detection through root cause and reporting.
- Hands-on experience securing AWS and internet-facing web applications and APIs; working knowledge of OWASP risks.
- Experience with firewalls and VPN/remote-access security, and with endpoint protection (EDR/AV) and device management.
- Experience with WAF, bot management, DDoS protection, and CDN security.
- Strong log analysis skills across firewall, application, cloud, and identity sources.
- Working knowledge of IAM, MFA, encryption, and secrets management.
- Experience supporting SOC 2, PCI DSS, or similar compliance programs.
- Scripting and API skills (Python, PowerShell, or similar) for investigation and automation.
- Excellent written communication, including executive-level updates.
- Ability to prioritize by business impact and likelihood, and to explain that reasoning.
- Must pass a background check.
Benefits
Comp & perks- Flexible PTO
- 6% 401K match
- 100% of the cost paid for the employee for medical, dental and vision
- 75% of the cost paid for dependents for medical, dental and vision